e7a513b8ea6798965ac7ab85da1b5f533e1d6a0bf9833c2fbc8dc18c6c18a45c | Triage

Analysis

max time kernel
41s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 18:38

Sharing

Report Analysis Logs

General

Target

e7a513b8ea6798965ac7ab85da1b5f533e1d6a0bf9833c2fbc8dc18c6c18a45c.exe
Size

160KB
MD5

095cedd948771823db8cf5d3fd59aa02
SHA1

937f6e99d1864c6bb87d8aa13204ebcd5a9d4802
SHA256

e7a513b8ea6798965ac7ab85da1b5f533e1d6a0bf9833c2fbc8dc18c6c18a45c
SHA512

fd0a04454b7dcf60eead4195a9ea805ca8b379701f330d04d7bc6d9af550b93f31211261b11b52bb595a435791b264e01543fbe1963e2194bef8168c3d78f1c8
SSDEEP

3072:8sDV6Az1gWgFvYGnJd6KpZV3uTN9WU/G9h3Gw590KqkbmzALbvl6:tQArgFvYGJd6KpZV3uTN9WU/G9h2w59X

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e7a513b8ea6798965ac7ab85da1b5f533e1d6a0bf9833c2fbc8dc18c6c18a45c.exe
"C:\Users\Admin\AppData\Local\Temp\e7a513b8ea6798965ac7ab85da1b5f533e1d6a0bf9833c2fbc8dc18c6c18a45c.exe"
1⤵
PID:1148

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1148-54-0x000007FEF28F0000-0x000007FEF3313000-memory.dmp

Filesize
10.1MB

Download
memory/1148-55-0x000007FEEDE30000-0x000007FEEEEC6000-memory.dmp

Filesize
16.6MB

Download
memory/1148-56-0x0000000001E86000-0x0000000001EA5000-memory.dmp

Filesize
124KB

Download
memory/1148-57-0x0000000001E86000-0x0000000001EA5000-memory.dmp

Filesize
124KB

Download